jhyry9docks/hsf-colanode repository overview

This is a specialized image for running a Colanode server where Redis and PostgreSQL are behind one or more Cloudflare Zero Trust Tunnels.

For more information check out the HSF Colanode⁠ repository.

You can set the following environment variables for connecting to database assets through client-side cloudflared that hits non-HTTP endpoints through a Cloudflare Zero Trust Tunnel. See the Cloudflare Zero Trust Access docs here⁠ and the CLI man page here⁠.

Redis (or a Redis-compatible server):

• CFD_REDIS_HOST
• CFD_REDIS_PORT
• CFD_REDIS_ACCESS_TOKEN_ID
• CFD_REDIS_ACCESS_TOKEN_SECRET

PostgreSQL:

• CFD_PGSQL_HOST
• CFD_PGSQL_PORT
• CFD_PGSQL_ACCESS_TOKEN_ID
• CFD_PGSQL_ACCESS_TOKEN_SECRET

You need to do the following to get this to work correctly:

• Create one or more Cloudflare Zero Trust Tunnels that:
  • Configure a public host name with a TCP endpoint for Redis
  • Configure a public host name with a TCP endpoint for PostgreSQL
• Create at least one Cloudflare Zero Trust Access Service Token
  • One for both or one for each
• Create one or more Cloudflare Zero Trust Access Policies with the SERVICE AUTH Action
• Create one or more Cloudflare Zero Trust Access Application(s) that:
  • Configure an Application Endpoint that points to the public host name for Redis
  • Configure an Application Endpoint that points to the public host name for PostgreSQL
  • Assign the appropriate Policies that you created
• Configure the environment for the Docker image
• Run the docker image in a Container
• Have fun with Colanode in a super flexible configuration! :)